$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa File: d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa (raw, json) Hash identifier: Gn+VI7lfganPwmI/UcomhjwjNGnB0FRw6c+gpqf9hss= Subject key identifier: EB:E2:E5:6B:E1:3B:64:6A:DD:81:84:8D:F2:4A:E5:8A:56:7A:A2:5C Certificate issuer: /CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3 Certificate serial: 010D0C9F432858494CC944EA8DB978B94B791780 Authority key identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 16509 IP address blocks: 208.71.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:44:ea:8d:b9:78:b9:4b:79:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=b6b96f04-5f63-4394-8c52-ee93d15ba748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a3:12:e5:3b:33:d1:7f:5b:20:83:da:f4:80: dd:bc:45:fb:70:83:8c:8e:76:67:d5:00:0c:f9:9c: 69:d5:59:fc:90:76:bc:eb:a7:16:3c:44:4c:5e:d8: 05:62:a4:d2:24:a4:52:91:eb:e8:f8:e3:3d:53:67: f2:7d:0b:8a:d3:a6:8c:df:12:21:c7:92:40:25:31: 74:c6:7e:df:7b:85:3d:0e:78:2b:8e:d9:77:8e:85: 79:9d:4f:c5:59:60:89:c4:28:48:c3:07:d1:ed:67: 15:fe:9b:0a:e1:88:e5:bf:fc:1f:26:ae:01:0a:1b: fa:70:a8:27:6b:69:e6:a5:07:10:3c:c6:98:23:46: 5e:60:d6:55:58:01:17:b4:68:cc:c5:a2:92:9d:73: 19:83:3c:ee:2a:c5:88:40:21:e6:d6:a9:5a:25:a3: 94:70:95:03:14:ba:51:ef:8b:3f:11:98:5d:9b:22: 12:63:1b:ed:88:74:00:88:0c:12:0f:72:e2:87:b3: 02:bc:74:f0:be:fb:41:4a:71:6c:bb:21:46:06:d9: bc:26:07:fe:68:70:7b:da:af:6d:24:a1:d6:88:96: 14:37:4e:5b:34:74:0a:17:a3:9c:26:42:90:cd:4c: 81:48:ad:dd:a8:68:95:71:7c:1d:e0:41:89:c7:8d: 4c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E2:E5:6B:E1:3B:64:6A:DD:81:84:8D:F2:4A:E5:8A:56:7A:A2:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl X509v3 Authority Key Identifier: keyid:F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer sbgp-ipAddrBlock: critical IPv4: 208.71.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:cf:59:da:c1:52:8f:ee:58:34:b3:e0:2c:01:bc:23:aa:8f: aa:69:5c:2a:b5:2f:89:3f:a4:f5:b7:c3:0a:0c:82:8c:e6:d3: c4:ac:d3:4e:83:b9:28:a5:22:d9:12:6d:20:0c:80:3d:ad:4e: 88:3b:b8:04:69:7c:35:ee:34:40:38:7a:e8:16:dd:6e:93:92: 17:a5:c0:b4:80:67:6f:c9:49:33:4d:2b:bf:52:3c:b4:f7:30: bf:91:63:f9:34:36:1e:21:36:93:61:46:c2:42:14:b5:36:c3: be:35:83:5d:08:18:e7:cb:47:45:72:f2:f3:3b:06:c2:3e:02: 5a:20:5e:ce:a9:47:3e:5b:8a:d7:a8:1b:dd:fb:74:fc:ab:2c: 6a:e0:1a:b2:80:52:ca:fe:78:71:56:db:f3:d8:d8:0d:44:f7: bb:04:dc:26:ae:27:65:ca:7a:b4:f4:bb:6c:c5:5e:96:59:7b: 50:50:bc:28:08:f2:bf:b5:60:29:4d:39:dd:11:b4:a9:63:0c: 1e:0b:84:d9:ae:97:15:c3:d4:b3:cb:54:72:f7:23:0c:5d:c7: 80:3b:9d:d5:31:43:7d:7e:99:1b:55:28:5b:d9:b4:87:c6:9d: 61:aa:b8:44:16:5e:b4:88:42:62:e3:61:de:9e:cf:0b:64:14: 91:30:a1:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElMyUTqjbl4uUt5F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlhYTE1NjctODlhOS00Y2U0LThiZDctZTYyNDk5OTA5 MWUzMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk YjZiOTZmMDQtNWY2My00Mzk0LThjNTItZWU5M2QxNWJhNzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqMS5Tsz0X9bIIPa9IDdvEX7cIOMjnZn1QAM +Zxp1Vn8kHa866cWPERMXtgFYqTSJKRSkevo+OM9U2fyfQuK06aM3xIhx5JAJTF0 xn7fe4U9Dngrjtl3joV5nU/FWWCJxChIwwfR7WcV/psK4Yjlv/wfJq4BChv6cKgn a2nmpQcQPMaYI0ZeYNZVWAEXtGjMxaKSnXMZgzzuKsWIQCHm1qlaJaOUcJUDFLpR 74s/EZhdmyISYxvtiHQAiAwSD3Lih7MCvHTwvvtBSnFsuyFGBtm8Jgf+aHB72q9t JKHWiJYUN05bNHQKF6OcJkKQzUyBSK3dqGiVcXwd4EGJx41MfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvi5WvhO2Rq3YGEjfJK5YpWeqJcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOWFh MTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0OTk5MDkxZTMvZDVkYmMzYjktYTQ3Yi0z ZGMwLTlkOTQtZTY2ZDE5NjI2OTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzlhYTE1NjctODlhOS00Y2U0LThi ZDctZTYyNDk5OTA5MWUzL2M5YWExNTY3LTg5YTktNGNlNC04YmQ3LWU2MjQ5OTkw OTFlMy5jcmwwHwYDVR0jBBgwFoAU9uKd3POYaXwTuehSHUAHiB0hTQgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOWFhMTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0 OTk5MDkxZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EdqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHPWdrBUo/uWDSz4CwBvCOqj6ppXCq1L4k/pPW3wwoMgozm08Ss006D uSilItkSbSAMgD2tTog7uARpfDXuNEA4eugW3W6TkhelwLSAZ2/JSTNNK79SPLT3 ML+RY/k0Nh4hNpNhRsJCFLU2w741g10IGOfLR0Vy8vM7BsI+AlogXs6pRz5biteo G937dPyrLGrgGrKAUsr+eHFW2/PY2A1E97sE3CauJ2XKerT0u2zFXpZZe1BQvCgI 8r+1YClNOd0RtKljDB4LhNmulxXD1LPLVHL3Iwxdx4A7ndUxQ31+mRtVKFvZtIfG nWGquEQWXrSIQmLjYd6ezwtkFJEwoU0= -----END CERTIFICATE-----Generated at Sat Apr 5 12:14:50 2025 by rpki-client